← Back to CareerVoxa

Privacy Policy for CareerVoxa

Last Updated: 26 July 2026

CareerVoxa ("we", "us", "our") is committed to protecting your personal data. This policy explains what data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: CareerVoxa Limited (company no. 17320948), registered in England and Wales Contact: privacy@careervoxa.com

1. Data We Collect

| Category | Examples | Purpose | |---|---|---| | Account data | Name, email, profile picture | Authentication and account management | | Career data | CVs, cover letters, job descriptions, interview notes | Providing the platform's AI career tools | | Billing data | Payment method tokens, subscription status | Processing payments via Stripe | | Usage data | Feature interactions, session logs | Service improvement and error monitoring | | Security data | IP addresses, sign-in timestamps | Detecting unauthorised access |

We do not collect or store raw payment card numbers — these are handled exclusively by Stripe.

2. Legal Bases for Processing (UK GDPR Article 6)

  • Contract performance — processing necessary to deliver the service you signed up for.
  • Legitimate interests — security monitoring, fraud prevention, and service improvement.
  • Consent — optional features such as geolocation job search (withdrawable at any time).
  • Legal obligation — retaining financial records as required by UK law.

3. Third-Party Data Processors

We share data only with processors necessary to run the service:

| Processor | Purpose | Privacy Policy | |---|---|---| | Google Firebase | Authentication and database storage | policies.google.com | | Google Gemini AI | AI-powered CV analysis and coaching | policies.google.com | | Stripe | Payment processing and subscription management | stripe.com/privacy | | SendGrid (Twilio) | Transactional emails | twilio.com/legal/privacy | | Sentry | Error monitoring and crash reporting | sentry.io/privacy |

We do not sell your personal data to any third party.

4. Data Retention

  • Account data: Retained while your account is active, deleted within 30 days of account deletion request.
  • CV and career data: Retained while your account is active; you can delete individual items at any time from Settings.
  • Billing records: Retained for 7 years to comply with UK financial record-keeping requirements.
  • Security logs: Retained for 90 days.

5. Your Rights Under UK GDPR

You have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — request deletion of your data ("right to be forgotten").
  • Portability — receive your data in a structured, machine-readable format.
  • Restriction — ask us to limit processing in certain circumstances.
  • Object — object to processing based on legitimate interests.
  • Withdraw consent — for consent-based processing (e.g. geolocation) at any time.

To exercise any right, email privacy@careervoxa.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk | 0303 123 1113.

6. International Transfers

Some processors (Google, Stripe, SendGrid, Sentry) may store data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place (Standard Contractual Clauses or UK adequacy decisions).

7. Changes to This Policy

We will notify you by email and update the "Last Updated" date above when material changes are made. Continued use of the service after the effective date constitutes acceptance.

8. Contact Us

Email: privacy@careervoxa.com Website: careervoxa.com